add throttle to prevent jQuery .click() hack from client