do not allow anonymous users to save preferences

reported by @signalpillar