Limit response only show extra data if valid user