Exempting devices from web filtering