fix req.body
add guest user for sql
Merge remote-tracking branch 'origin/master'