CISCO WiFi SSID CONFIGURATION AND SECURITY

I have an existing "GUEST" SSID that is currently being abused by users because the password is shared among them. I need this to change. Below is what i am looking for: 1. Users need to self-register to get login details before being granted access to the internet. 2. Access is only for 1 hour 3. Login details are temporary (Just like in airports and restaurants) 4. No downloading/adult/streaming or gambling sites are allowed (These need to be blocked) THE CURRENT SETUP: - I have one Controller and all my branches are connected to it. (Model: 5508) - AP models: Cisco Aironet 3700 Series 802.11ac Dual Band Access Point - Controller is not onsite (Hosted at the service provider Datacenter) NO CHANCERS PLEASE!!!!!