semi dynamically implemented code to permit POST form for only valid users