security update to allow droom users not to have permission to log into droom