updated default role as guest.
locked down security to wildcard web pages for only roles excluding guest.
updated guest dashboard to display message rather than empty variable (even though for now, guest is served only access denied page.