Add basicAuth.excludes to AccessControlPlugin