core/routes.php holds many route NOT starting with core
e.g. /avatar or /tags or /search or /lostpassword

I think it's pointless to add many more exceptions