*/ protected $except = [ 'api/*', '/csp-report' ]; }