removed the guest_user

Since the guest_user is removed, also remove it from the security.yml