Add the ability to specify a list of users who are authorized to use a secured app