ASP.NET Web API rate limiter for IIS and Owin hosting