Close #53: Restrict users who may authenticate