document the quota middleware setting the response headers