Add middleware which enforces authentication for almost all URL's
Add management command which unlocks all lockout commands