add subclass of RemoteUserBackend to make sure that we don't create unknown users