add auth exclusions for ping endpoints