fix LOGIN_EXEMPT_URLS allowing unauthenticated  querys to any graphite.metrics pattern