diff --git a/src/middleware/route-ratelimit.js b/src/middleware/route-ratelimit.js
index 5b78ff9..172d0d1 100644
--- a/src/middleware/route-ratelimit.js
+++ b/src/middleware/route-ratelimit.js
@@ -102,8 +102,10 @@ const routeRateLimit = async function(req, res, next) {
   // This boolean value is passed from the auth.js middleware.
   const proRateLimits = req.locals.proLimit
 
+  // console.log(`proRateLimits: ${proRateLimits}`)
+
   // Pro level rate limits
-  if (proRateLimits !== undefined) {
+  if (proRateLimits || proRateLimits === 0) {
     // TODO: replace the console.logs with calls to our logging system.
     // console.log(`applying pro-rate limits`)
 
@@ -169,6 +171,9 @@ function evalUserPermissioins(req, authData) {
     apiLevel: authData.apiLevel
   }
 
+  // if apiLevel = 0 (free tier), then return the default values.
+  if (retObj.apiLevel === 0) return retObj
+
   const level20Routes = ["insight", "bitcore", "blockbook"]
 
   const locals = req.locals