enable redirect to error on auth fail, print entire request header to log,
path contains rather than startswith for public paths