I set it to `true`, but it still allows anonymous access.
I set it to
true, but it still allows anonymous access.