[api] skip authentication before filters for states/countries so that frontend's checkout can work even with requires_authentication=true on the API

Fixes #3762