Fix role handling in auth

Use fixed string Anonymous as role in Anonymous handler
if no role name is given.
Check if a role is defined in External handler