Updated guest controller with auth