IP Access Control: if anonymous is true and app id is null then grant access.