Remove bc-auth. Improve bc-access-redirect to confirm auth and check roles