Add new "unprotect.OAuth" config setting to the seraph filter, which
when set to true won't redirect authenticated OAuth requests to the Duo
servlet