Implement guest sign in and constraints

@gabebw @jsteiner


I'd say `ensure_not_guest`