auth users which are not listed in admin config