Use the oauth app's credentials for rate limiting

Requires fewer creds now. We can already identify ourselves by the oauth app used in resque-web.