give auth and anon more book permissions