Create the user view and lock it up with authenticate policy