Signed-out user can access the bookmarks page when users are allowed to explore resources without signing in

[MisRob]

Observed behavior

With this device settings:

I can access the bookmarks page as a signed-out user via URL /en/learn/#/bookmarks

Expected behavior

Even though users are allowed to explore resources without signing in, giving access to the bookmarks page still doesn't make sense for anonymous users. For signed-out users, it should rather show "You must be signed in" message:

User-facing consequences

Anonymous users can access pages that shouldn't be visible to them

Steps to reproduce

1. Select "Allow users to explore resources without signing in" in device settings as an admin
2. Sign out
3. Type /en/learn/#/bookmarks URL to the browser address bar

Context

• Kolibri version: Kolibri 0.15.1.dev0+git.20220127215827
• Operating system: Ubuntu 20.04.3 LTS
• Browser: Chrome Version 97.0.4692.99 (Official Build) (64-bit)