check a custom header for ip to rate limit