REST endpoints that have a limit parameter should specify an upper limit.

Some of our endpoints allow the user to specify a `limit` parameter that specifies how many records should be returned. We should probably impose a reasonable upper limit for these as fetching a bunch of records from Cassandra could be blocking the server.