Connection throttling is now outside of the session thread.

Spawning a thread just to deny someone access just seemed like it
would make a DOS attack a little easier.