exclude face requests from all middleware