there is no need for flood control, it must be implemented at apache or
server level. The formkey stuff is enough to protect forms.