Allow URLs white list

With this you may specify URLs which are not blocked by the session middleware.
I needed this to create public APIs, so that only part of my routes may be accessed without authentication.
The white list match is very simple, and no RegExp is involved for the moment.