Implement rate-limiting

http://www.vinaysahni.com/best-practices-for-a-pragmatic-restful-api#rate-limiting
The problem is if we instantiate the class before calling the authentication providers. We shouldn't, but there is a chance.