Explicitly configure routes to not require auth when it isn't needed

src/optimize/lazy/proxyRole.js

@@ -13,7 +13,8 @@ module.exports = (kbnServer, server, config) => {
         passThrough: true,
         xforward: true
       }
-    }
+    },
+    config: {auth: false}
   });
 
   return fromNode(cb => {

src/server/http/index.js

@@ -40,7 +40,8 @@ module.exports = function (kbnServer, server, config) {
           listing: true,
           lookupCompressed: true
         }
-      }
+      },
+      config: {auth: false}
     });
   });
 
@@ -51,7 +52,8 @@ module.exports = function (kbnServer, server, config) {
       method: 'GET',
       handler: {
         file: filePath
-      }
+      },
+      config: {auth: false}
     });
   });
 

src/ui/index.js

@@ -57,6 +57,8 @@ module.exports = async (kbnServer, server, config) => {
   });
 
   server.decorate('reply', 'renderApp', function (app) {
+    if (_.isString(app)) app = uiExports.getApp(app) || uiExports.getHiddenApp(app);
+
     let payload = {
       app: app,
       nav: uiExports.apps,