Respond with HTTP 429 (Too Many Requests)

HTTP 429 is likely more appropriate than 403.