Don't check SSO on JSOn calls