Make users bannable.

- Short-circuit non-get requests for banned users
- Close #247