Add config roles_skip_auth_filter which has a list of roles that the user can have to skip the authorisation filter.