Add /remote.php/webdav/ to paths that can be accessed without Authentication