moved allowedUsers to dropbox