Strip cookies, authentication from DNT policy request

Sets anonymous: true, which removes cookies, HTTP authentication, client cert.