docs: def should_require_authentication(self, url):
          """ Returns True if we should require authentication for the URL given """
          return (not self.routes # require auth for all URLs
                  or any(route.match(url) for route in self.routes))