ACSPRING-107 Add configuration properties require-auth-[include|exclude]-paths

As suggested on How to disable the custom atlassian spring boot interceptors for certain paths?.

Spring Boot 2.0 removed support for the security.ignored configuration property. Without that, the only way to allow unauthenticated requests to an endpoint was to use the @IgnoreJwt annotation, a solution which is not always feasible.