Hosted site security

[zflat]

Bringing the application out of the shop in onto the web, we need a basic level of security for viewing application content. At the September council meeting, we talked about 1 password to get access to view everything. The shop computers can be set up with that password so logging on will still be easy.

[zflat]

Commit fc75510 adds user groups and a seed user to be a "view all content only" in the "volunteer" group. With this setup, a logon to the volunteer user will be able to see everything but not edit. Editing is only for the staff user.

[zflat]

Commits d01f8a7 and 0ead64b add IP whitelisting functionality. Commit dd7b967 reverts permissions set previously in fc75510.