more strict anonymous user check