Allow anonymous users only access to / and /login.
Remove unused field.