Permission for anonymous user
'access content' should be good in general, check it under "people/permissions" to seem if also anonymous users have right to "access content". 
You can also declare:

_access: 'TRUE'


In this case you don't need the permission part, this one should definitely work!