allow non-anonymous login