I have a Flag called Favorites that allows anonymous and logged in users to flag places of interest listed on the site as they plan a visit the area. Each of the places of interest on the site are displayed as Views lists and also on Views Data Overlays on an OpenLayers map.

The Favorites flag works as designed for both anonymous and logged in users when the flag is a field on the content type. The Favorite locations are displayed as lists of the user's favorites and also as a markers on a layer on the OpenLayers map.

Users may also flag a Favorite by clicking the Add to Favorites link in the popup for each location when viewed on the OpenLayers map. The OpenLayers map layers are created in Views and use the Flag token from the view in the OpenLayers popup configurations for each of the map markers. Clicking this link in the marker popups works as designed for logged in users (the locations are saved to their list and to the map layer), but does not work for anonymous users. When an anonymous user clicks the link, they get this message using the same browsers as the logged in users:

You must have JavaScript and cookies enabled in your browser to flag content.

Urls for the Flag links on the Views lists have the following at the end: &has_js=0 or &has_js=1
The Urls for the Flag links in the popups do not have either of these at the end. If I append either of these to the ends of the Flag link url, the Favorite is saved for the anonymous user.

I'm not sure if this is a Flag, Views, or OpenLayers issue - or if I have not configured something properly for anonymous flags. Has anyone had a similar problem and found a solution?