add limited_user filter that applies to the /upgrade route