JWT allows us through the unless method to inform URLs and request methods that should not require authentication.
But as far as I know it is necessary to do this when the Middleware is informed to ExpressJS in the early stages of configuration.
There is no way to report late, when you define routes in other modules to exempt subroutines from authentication.