support auth.anonymous option
the anonymous user group, for users that did not log in