middleware for CMS logging out all sneakpeek users

Handles sneakpeek users showing up on CMS.

@sefk @jrbl
well, as long as AuthenticationMiddleware is enabled (which it is for CMS and LMS), there should be a request.user.  There's many other places in the code that assume it exists, so I'm not worried that it won't exist...