DEV: toggle_anon missing from requires_login (#37644)

The `toggle_anon` action in `UsersController` was missing from the
`requires_login` filter,

app/controllers/users_controller.rb

@@ -40,6 +40,7 @@ class UsersController < ApplicationController
                    reset_recent_searches
                    user_menu_bookmarks
                    user_menu_messages
+                   toggle_anon
                  ]
 
   skip_before_action :check_xhr,

spec/requests/users_controller_spec.rb

@@ -804,6 +804,12 @@ RSpec.describe UsersController do
   end
 
   describe "#toggle_anon" do
+    it "requires login" do
+      post "/u/toggle-anon.json"
+      expect(response.status).to eq(403)
+      expect(response.parsed_body["error_type"]).to eq("not_logged_in")
+    end
+
     it "allows you to toggle anon if enabled" do
       SiteSetting.allow_anonymous_mode = true