Configurable HTTP rate limiter