Allow annonymous users to create sessions

pwd/session.go

@@ -61,11 +61,15 @@ type SessionSetupInstanceConf struct {
 func (p *pwd) SessionNew(ctx context.Context, config types.SessionConfig) (*types.Session, error) {
 	defer observeAction("SessionNew", time.Now())
 
+	// Annonymous users should be also allowed to login
+	if config.UserId != "" {
 		if _, err := p.UserGet(config.UserId); errors.Is(err, userBannedError) {
+
 			return nil, &AccessDeniedError{err}
 		} else if err != nil {
 			return nil, err
 		}
+	}
 
 	s := &types.Session{}
 	s.Id = p.generator.NewId()