In my testing of @line-o's #142, setting guest=no prevents users from even getting to the page where they would log in. I propose reverting this PR and restoring the ability of users to access the log in page so that they can authenticate.