Add remoteheader to login exemption