Disable basic auth on endpoints that should be public