fix anonymous authentication