adding access denied entry point and maximum concurrent sessions