Do not force login on some special URLs

When user_saml is configured to force users to log in, some URLs should not
require authentication, such as /public.php or /remote.php.