Provide way for auth to be configurable per upstream

[jbrehm]

For most cases, having an email regex available that is allowing our entire employee base to access upstreams works. However, we're running into edge cases where it would be nice to have the ability to further restrict access to certain upstreams (without having to run a separate instance of sohop that is).