adds koa-better-ratelimit
adds our own ratelimit middleware to init config

- sane defaults in config.json
cleanup