Limit unauthenticated requests to 60 per hour