Limit users resource routes