Return 401 on no session id
Test ratelimiting without session
Directly test rate limiting
Merge pull request #185 from rcchan/ratelimit_sessionid_error

Return 401 on no session id for rate limiting, update tests