[PLINK2-6] - Picketlink forwards to /hosted for resources without auth-constraints