WIP: Combined Login/Registration: Set up basic enrollment infrastructure.

If this is the case (we don't have permissions to enroll), it seems like it might be more appropriate for the enrollment views to return a 401 or a 403.