If site is not authenticated, hide metadata form and user auth page

attilatilman → changed the visibility of the branch 3446787-if-site-is to hidden.

MR updated with cache handling.

mglaman → credited tanmayk → .

Taking a new approach with an route access policy that can be reused. Crediting tanmayk as he worked on a solution that inspired this approach.

Balu Ertl → made their first commit to this issue’s fork.

I totally agree with streamlining the post-enablement authentication process which I always felt was somewhat counter-intuitive (two similar actions necessary to perform but not having any reference from one to another).

Now as they depend on each other there's at least some linearity between the two actions. So why not make the administrator's job easier by calling their attention to do (almost) the same with their user account as well?

Failing 10.3 tests for other reasons. Committing this now so I can get the 10.3 fixes in later.

Automatically closed - issue fixed for 2 weeks with no activity.