Only authenticate /configuration but not /configuration.json.