platform-auth waf anchor