LPS-52160 Fix compile error
LPS-52167 fix inverted condition
LPS-52167 fix double escaping

aui:button eventually calls `AUIUtil.buildData`, which itself calls
`escapeAttribute`.
LPS-52011 - Explicitly default to view only permissions for guest
LPS-52011 - Explicitly check p_auth token