Authorized workspace access

The production service would sign UVic users in through Shibboleth (SAML 2.0). This demonstration workspace uses email or Google sign-in. Roles are assigned by an administrator and enforced on the server.