Don't show the form page to unauthorized users
Flag "anyone" auth function as allowing anonymous access

Starting from 2.2 you need to explicitly flag auth functions that
allow anonymous access with the p.toolkit.auth_allow_anonymous_access
decorator