Refine guest access to /editor