Added a basic /access view.

I don't like the inline JS in the page, but the existing logic in
static/js/badge-accept/badge-accept.js is pretty coupled to the
issuer frame, and we're going to be migrating to use the observer
API in #511 anyways, so the code will likely be pretty temporary.