added https protocol support; allow excluding methods requiring authn