Decide access by role, company and action

Role selection changes a synthetic server context for study. This is not a login or authorization server. Real principals must be verified server-side.