[api] skip authentication before filters for states/countries so that frontend's checkout can work even with requires_authentication=true on the API

Conflicts:
	api/app/controllers/spree/api/states_controller.rb

Fixes #3762