Prevent access to the application entirely unless logged in through Google and whitlisted.

whitelist is hardcoded inline.