HCSVLAB-376: Add token authentication whitelist for controller methods