Rate-limit per IP address the requests to the feedback API

Questions:

* Should we move the rate limit function to core?
* Should it be configurable? How?
* How should we handle the Redis connection properly?