Optional: Whitelist static users for login