Prevent anonymous from calling read/update on user