Authenticate operator

Operator authority is established server-side before LGOS accepts controlled review actions.