moved anonymous access to auth module and changed implementation of
anonymous IP access