For upstream 2.5

commit 97a2c428eae5e8df570b33f628f93580e2d50180 needs "Refactor AnonymousUser exception into ForbidsAnonymousUsers module" (at least to run %check in OBS build)
Additional commits help when config is wrong