Rate limiting

Capping how many requests each client may make in a given time. It protects a service from being overloaded by a misbehaving script or abusive caller, which is then usually answered with a 429 Too Many Requests status.