Fix django-cas issue with API

It turns out that `django-cas` was interfering with API auth on cyder.nws. Thankfully, the workaround was pretty easy and now we have a way to exclude any URLs we want from CAS, which is enclosed in this pull request.