Remove AllowAnonymousAttribute
Fix some bugs in ManageUser and ManageRole