Simple access control for Shibboleth/Rails environments