added test to see if request.user is anonymous