Basic rate-limiting middleware for express