The gk accessor is a security gatekeeper mapper. The URI provided on the uri argument is tested against a security policy Zone specified at ffcpl:/GateKeeperPolicy.xml. If the uri matches a Zone pattern it a request is made to a session validator - if this fails the request is redirected to a login service.

For detailed explanation of the gatekeeper see the guide.