diff --git a/readme.md b/readme.md
index 7ea426c..4fe048e 100644
--- a/readme.md
+++ b/readme.md
@@ -7,8 +7,8 @@
 [travis-url]: https://travis-ci.org/tlvince/hassock
 [travis-image]: https://img.shields.io/travis/tlvince/hassock.svg
 
-Passes through any requests as-is to CouchDB, optionally setting an HTTP auth
-header if `DB_USERNAME` and `DB_PASSWORD` are set.
+Passes through any requests to `/_users/` as-is to CouchDB, optionally setting
+an HTTP auth header if `DB_USERNAME` and `DB_PASSWORD` are set.
 
 Intended to be used to manage (regular) CouchDB user accounts. Allows you to
 keep your CouchDB admin account credentials out of your client code, whilst
diff --git a/server.js b/server.js
index 3b65f64..c5460a3 100755
--- a/server.js
+++ b/server.js
@@ -20,7 +20,7 @@ var db = {
   password: process.env.DB_PASSWORD
 }
 
-app.all('*', function (req, res) {
+app.all('/_users/*', function (req, res) {
   var opts = {
     uri: db.url + req.url,
     method: req.method