Configuring anonymous access for web applications