https://stackoverflow.com/questions/69800710/how-to-create-an-authorization-policy-for-anonymous-users