test rate limiting