use anonymous group to manage anonymous permissions, fixes permissions for newly created users