not including banned users

backend/api/routes/leaderboards.js

@@ -22,4 +22,11 @@ router.post(
   LeaderboardsController.update
 );
 
+//TODO remove me
+router.post(
+  "/debug_update",
+  RateLimit.limit1persec,
+  LeaderboardsController.debugUpdate
+);
+
 module.exports = router;

backend/dao/leaderboards.js

@@ -35,6 +35,7 @@ class LeaderboardsDAO {
             [str + ".acc"]: {
               $exists: true,
             },
+            banned: { $exists: false },
           },
         },
         {