Skipping auth header for S3-backed static content