in app/com/gu/viewer/controllers/PanDomainAuthActions.scala [11:13]
override def validateUser(authedUser: AuthenticatedUser): Boolean = { (authedUser.user.email endsWith "@guardian.co.uk") && authedUser.multiFactor }