allow external users access to tickets via token, readonly for now
tighten up external user access
let ticket users view tickets for now while we rethink the block search