Standard Hudson security set up of "anonymous is read-only, but logged in user can do anything"