A web design company has moved all client sites to Google App Engine. Some sites are still under development and should only be accessible to customers and company employees from any location.
What is the solution to restrict access to these in-progress sites?