exclude shibboleth urls from proxying