Rate Limiting, fixes #35

Fixes #35 
In addition to this, we need an upper limit on the number of limiters.

Try to do it like so: if you hit the upper limit, start making your keys based on the domain name + IP instead of the hostname + IP. In other words, lop off the subdomain. Then after things "cool down", you can return to keeping the subdomain.