Fix #2: Remove authentication as list of urls from config.py to a class attribute (authenticate = True) on controllers.py.