add rate-limit tests