fixup: forbid anonymous usage of the ignore_layout parameter and forbid anonymous page rendering in xhtml style
Some tests have been broken since preventing anonymous access in xhtml style.
See https://lab.nexedi.com/nexedi/erp5/-/merge_requests/2147