Ignore requests to /api*.js. No need for going through spring security