MY DEMRA moderation

Private staff access. The token stays in memory. Public visitors do not need an account.