Add ACL requiring valid user