fix(cas-backend): make /api/status public (no Bearer auth required)

fix(cas-backend): make /api/status public (no Bearer auth required) #51