Do not force login on neither special URLs nor CLI

When user_saml is configured to force users to log in, some URLs have to be
excluded from the enforcement.

CLI works again when user_saml "force login" is set.