only allow u5 user to be accessed via localhost