Do not force login on some special URLs

When user_saml is configured to force users to log in, some URLs should not
require authentication