Implement rate-limiting

http://www.vinaysahni.com/best-practices-for-a-pragmatic-restful-api#rate-limiting
we could assign default ``$event_plugin_info['limits']['anonymous user'] = 0`` on the plugin process to avoid doing it here.