[create_session] Remove /notebook/api/create_session from not login and allowed already
@@ -308,7 +308,7 @@ class LoginAndPermissionMiddleware(MiddlewareMixin):
if request.path in ['/oidc/authenticate/', '/oidc/callback/', '/oidc/logout/', '/hue/oidc_failed/']:
return None
- if request.path.startswith('/api/') or request.path == '/notebook/api/create_session':
+ if request.path.startswith('/api/'):
return None
# Skip views not requiring login
