[api] Replaced instances of CONFIG[:allow_anonymous] with ApplicationSettings::AuthAllowAnonymous