allow anonymous user in Rest API