add check for on campus ip or shib auth for summon restricted records
set var with auth status so function is called just once. convert space indents to tabs for consistency