Add notes about required anonymous access to login/connect routes

Fix #333