Change class name  to  as it is more accurate
Apply rules to authorization

* User must be an owner of the org to set up the app
* User must be a member of the org to access the app
* 403 user if they do pass authorization test
* Create BaseHandler to set up sessions and render templates
* Adjust login file since we no longer need to display access token
* Create not_admin page to explain why only an admin can set up app