authorization manager should have 'isAnonymous' method, which would be used here