Restrict default anonymous login to authentication(very challenging to me! )