auth/credentials: anonymous should not have a user principal