Handle guess sign-in cases

You may want to do `before_action :require_login` in `ApplicationController`, and then whitelist. Are you requiring login in >50% of your app? If so, then I'd whitelist instead of blacklisting.