Interpretation of doco that anon users have is_active == False is
incorrect, handle anon users properly.