creating a backup user with IP whitelisting