add simple text user access control(not secure)