limit imap users and create new mailbox string

This should fix #1902. A very simple yet usable approach. Also will it be possible to use specific url schemes mentioned in the same issue.
reading the user ids from a csv file is a bad idea - what about reading the list of allowed users from the config file?