add rate limit to app, handle non signed in users