Update app.py

app.py

@@ -27,7 +27,7 @@ async def proxy(full_path: str, request: Request):
     session_token = request.headers.get("token_session")
 
     # Rotas públicas não exigem validação
-    public_routes = ["user/login", "user/register", "user/session", "session/create"]
+    public_routes = ["user/login", "user/register", "user/session", "session/create", "session/end", "users/by_email"]
     if full_path not in public_routes:
         if not session_token or not await is_session_valid(session_token):
             return Response(content="Não autorizado", status_code=401)