guest user works with reset database; require sign in to access static pages