guest auth  nearly finished