fixed guest user bugs

could have caught it with some good rspec tests :D