os.getenv('REMOTE_USER') returns 'None' instead of
throwing an exception.  This patch makes it do the
right thing.  Additionally, it moves the 'anonymous'
user setting into the 'else'.