If you can see this page, you signed in with an allow-listed Google account and the gate is working end to end.
Replace this file with your brand guide: drop your HTML into the
protected/ folder. The file named index.html
is served at the root (/); any other file is served at its
own path — e.g. protected/tone.html becomes
/tone. Images, CSS, and JS in that folder are served too,
and every file stays behind the login.