Hide create actions for anonymous users

Fixes EDOZWO-165

To display the login form instead of a blank "access denied" page,
navigate to admin/config/system/site-information and set "Default 403
(access denied) page" to "user".