WatchListRss should by default deny guest access

Since guests don't have a watchlist, they should not be able to use this RSS. Thus, in a default wiki, guests should be denied access to this document. As a side effect, when a guest tries to view the watchlist, an XWiki.XWikiGuest document is automatically created if the page is unprotected.