Add security on app (user only)