adding guest roles to authorization_rules.