Fix saving rate limits via the web admin.

I thought this worked previously, but apparently deeply nested stuff
starts to break down without taking the accepts_nested_attributes_for
approach. It's a little more complex, but it seems to account for
setting all the deeply nested stuff. It also cleans up our reliance on
having _id as attr_accessible (which it really shouldn't).