Mercurial web server with user permissions