Incorrect redirects when logged in

[and-rad]

Due to the current redirection rules, a logged-in user cannot use confirmation links that point to the auth path in the URL. The auth app redirects all requests to the actual app if the visitor is logged in already. This hasn't been a problem until now, but with the implementation of e-mail address change requests, this causes inconvenience because users must log out first before they can confirm the changes to their e-mail address.

[and-rad]

The Anon middleware should take a new parameter that defines exceptions to redirection. This seems like the easiest and most straightforward way to go.