Authentication policy for pyramid using repoze.who 2.0 API