Adding AccessGrants model and other SSO code