Close #59. Change access control logic to test a guest role first