Web access controls

Yes, future work is to refactor Embargo and Leases and Embargoable.  Embargoable previously had everything intertwined. This is the first step in separating them.