New guest module

Useful for testing or demos. Handles

/auth/guest
/auth/guest?login={guest_id}

It's not meant to be a secure authentication method. Anyone knowing
guest_id can log in. And any request to '/auth/guest' will probably
create a new user.