Rest url excluded from authentication.