#254 Authentication review

Resolves #386 
- Added rate limits
- Added support for WS headers