WebOPI: add unsecured_opi_paths preference to allow
authentication exceptions