A simple way is to Use a log in form to ask for them ( a 2 textbox form and an accept and cancel buttons may be enough)
If the user cancels, then close the application.
You can verify if this is an allowed user by searching it in the database of allowed users.
If the user is allowed, then register the start of the session in a public variable in the main module of your application, to be used across all your forms.
Hope this helps