Access policy

Authentication can use Google or magic links. Project access is still determined by the fixed portal policy file.