Trying to lock down UI

Adding authorised users.  Let's see what happens in my database.
Doesn't seem to be reliable in anything but chrome :(