code: private boolean noAuthn(HttpServletRequest hreq) {
  		if(pathExceptions!=null) {
  			String pi = hreq.getPathInfo();
  			if(pi==null) return false; // JBoss sometimes leaves null
  			for(String pe : pathExceptions) {
  				if(pi.startsWith(pe))return true;
  			}
  		}
  		return false;
  	}
docs: If PathExceptions exist, report if these should not have Authn applied.
  @param hreq
  @return