I'm not sure if it's very hard at all. Maybe @asgarth can even shed some light on it.

From my understanding an easy UI that creates a username and password (or perhaps only a password)

And in the backend limitations to what a user can do when logged in with that password/guest account.

It really could be that simple.