derived User from CObject successfully.
add Users to AppControl.
implement login verification.