$ 0 0 we are not a commercial (paid) user. we are using express. are we not supposed to use users.allow? the file is there with the express install