Restricting access with user name instead of mail. Possible?