Replace more log.Fatal() with error returns.  Add support for AuthorizeGuest().