API `/sso/config` is called by iframe handler and should not require api key
API `/sso/config` is called by iframe handler and should not require api key

SkygearIO/skygear-server,SkygearIO/skygear-server,SkygearIO/skygear-server,SkygearIO/skygear-server