userlogin auditing and whitelisted access