added excludes so JAAS authentication will work