Remove API permission for anon user