limit the number of times a user can click