Apply to routes outside of Nova

[igaster]

The latest update here prepends nova url to routes configured within reauthorize_urls.

This disables 2FA checking for app URLs that don't belong to Nova. It used to work in the past for these URLs until v2.2.14

[cparkinsonMYCM]

To add to this I would like to reauthorize the /nova-api/impersonate route, but this is being transformed to /nova/nova-api/impersonate - as well as the fact that it's a POST request, which seems to be problematic too...