Don't require authentication for /version.json & /status.json
These two URIs are a good way to query the current daemon for liveness / it's current status and so it would be good to not require authentication for them.
Reading http://www.sinatrarb.com/faq.html#auth it looks like we would need to choose the second approach. If this is fine I can create a MR for that.