add guest role, and add cookie name for token.