explicitly deny authorization to new users in production environment