It looks like XUF is returning 'Anonymous User' if the user is actually invalid
(which might be a bug in XUF or a problem in how it is being called).  Either
way, I propose to trap in workspaceSelectionForm the case where Anonymous User
is accessing it and dropping them back into a 'login failed' XUF form.