SECURITY: support for public URLs when authentication fitlering enabled, todo: support public information for join requests (groups and children) using transport objects