add user search feature. allow signin only for approved users