Do not force login on special URLs and CLI

When user_saml is configured to force users to log in, some URLs will be
excluded from the enforcement.

CLI works again when user_saml forceLogin is set.