CLC-2127 User whitelist implementation

Addresses https://jira.media.berkeley.edu/jira/browse/CLC-2127 and its subtasks. 

Users can log in if they have logged in before, or if they have a canvas acct, or if they are on the whitelist. TODO also if they're first-year students (which requires data from the BF_STUDENT_VW view or LDAP). 

Whitelist administration is via RailsAdmin at localhost:3000/ccadmin and is simple as can be. If a user ID is in the user_whitelist table, he's on the whitelist and can log in.