the anonymous user needs home permissions, otherwise the login dialog is...

... shown immediately after surfing to the server url.