Added the allowed dir and host and user list files

store authorized user and host list for validation.  This doesn’t
store any auth data, they are just lists of users and hosts that are
within a given application.