include/exclude http patterns for request signing/verifying