Keep regular authentication on /Api.svc, /Concepts, /Puma as well