/_status endpoint shouldn't be under sso

instead, the nginx config prevents all access apart from localhost
Merge pull request #78 from alphagov/no-auth-for-status-endpoint

status endpoint shouldn't be under sso