Added guest user check to isAllowed