rate-limit to 500 requests per hour, 1000 per day