add operator login, forbid admin from accessing opertion console