fixed a bug in the server
updated permissions to allow anonymous access