Add rate limitting and CORS