@bigcommerce/catalyst-core patch Re-apply auth grouping approach with middleware exemption to preserve functionality of /login/token endpoint for Customer Login API