Allow badge access via a URL.

First pass at badge access via URL
Works with invoice access code.

Accessing user must be logged in
Accessing user must be of permission "front desk"
Accessing user must have uers invoice ID code, can be scanned via QRCode
(that's the idea right?)

Accessing user can then access the badge.