Added option to protect ajax calls
If it's an ajax call with protection off, we ignore it (do not attempt to rate limit)
If protect is on, it checks it additionally (per_page override)