forbids anonymous accesses