EZP-20286 - Implemented excluded URI prefixes feature + fixed permission issue while loading root location with API (router is invoked before security firewall, so no authenticated user yet)