True for login/register/refresh endpoints (they never need a token).
static bool isTokenIssuingEndpoint(String endpoint) => _tokenIssuingEndpoints.any((String e) => endpoint.contains(e));