HOLI-1429: handle anonymous users

It seems Oathkeeper is currently not able to NOT generate an ID token for anonymous users. Therefore, if the username == 'anonymous' a non-authenticated (aka anonymous) user is assumed.