s3:auth_server: use cli->is_guestlogin instead of parsing cli->inbuf.