Added basic access control.

Requires a tag to be marked in DynamoDB as allowed before dispensing.