Refactoring: Allow anon users via config
Added: ACL