All form actions should be available to anonymous visitors.