added allowanonymous for actions