Allow /v1/_ping run unauthenticated