Restrict all files of a static site to a whitelist of users, using Google App Engine authentication.