diff --git a/envipath/settings.py b/envipath/settings.py
index d2559db5..18dd8681 100644
--- a/envipath/settings.py
+++ b/envipath/settings.py
@@ -341,3 +341,9 @@ FLAGS = {
     'ENVIFORMER': ENVIFORMER_PRESENT,
     'APPLICABILITY_DOMAIN': APPLICABILITY_DOMAIN_ENABLED,
 }
+
+LOGIN_EXEMPT_URLS = [
+    '/api/legacy/',
+    '/o/token/',
+    '/o/userinfo/',
+]
diff --git a/epdb/middleware/login_required_middleware.py b/epdb/middleware/login_required_middleware.py
index 91ea1f6a..cd3a52ee 100644
--- a/epdb/middleware/login_required_middleware.py
+++ b/epdb/middleware/login_required_middleware.py
@@ -11,7 +11,6 @@ class LoginRequiredMiddleware:
                                reverse('logout'),
                                reverse('admin:login'),
                                reverse('admin:index'),
-                               '/api/legacy/'
                            ] + getattr(settings, 'LOGIN_EXEMPT_URLS', [])
 
     def __call__(self, request):