User restrictions for your Express Application