Enable anonymous apply_issue behavior by default and only fall back to login when needed.

rietveld.py

 # coding: utf-8
 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 """Defines class Rietveld to easily access a rietveld instance.
 
 Security implications:
 
 The following hypothesis are made:
 - Rietveld enforces:
@@ skipping 28 matching lines @@
     # email and the cookie.
     self.email = email
     self.password = password
     if email and password:
       get_creds = lambda: (email, password)
       self.rpc_server = upload.HttpRpcServer(
             self.url,
             get_creds,
             extra_headers=extra_headers or {})
     else:
-      self.rpc_server = upload.GetRpcServer(url, email)
-      # If email is given as an empty string, then assume we want to make
-      # requests that do not need authentication.  Bypass authentication by
-      # setting the flag to True.
       if email == '':
-        self.rpc_server.authenticated = True
+        get_creds = lambda: (email, None)
+        self.rpc_server = upload.HttpRpcServer(url, get_creds)
+      else:
+        self.rpc_server = upload.GetRpcServer(url, email)
 
     self._xsrf_token = None
     self._xsrf_token_time = None
 
   def xsrf_token(self):
     if (not self._xsrf_token_time or
         (time.time() - self._xsrf_token_time) > 30*60):
       self._xsrf_token_time = time.time()
       self._xsrf_token = self.get(
           '/xsrf_token',
@@ skipping 277 matching lines @@
           if not 'Name or service not known' in e.reason:
             # Usually internal GAE flakiness.
             raise
         # If reaching this line, loop again. Uses a small backoff.
         time.sleep(1+maxtries*2)
     finally:
       upload.ErrorExit = old_error_exit
 
   # DEPRECATED.
   Send = get