improve implementation of moving-window reset

instead of always returning now() + 1 the reset
value is now the distance between the oldest request
and the rate limit window size. This is a better representation
of when the client will be able to excercise the full value of the limit
again.