csfr exempt on BIBLIB endpoint when not logged in