Middleware: attaches req.user if JWT is present and valid, attaches guest user if x-guest-session-id is present, otherwise continues as anonymous (no req.user).
Middleware: attaches req.user if JWT is present and valid, attaches guest user if x-guest-session-id is present, otherwise continues as anonymous (no req.user).