discuss.answer
If the Anonymous user group didn't have a Context Access ACL entry for the 'web' context (or whatever front-end context the Login page was in), that would explain it (though in that case anonymous users wouldn't see any resources at all in that context).