(WIP) Throttle by basic auth creds

(I'm putting this up to get eyes on it.  I'm going to test this out on some production boxes before I feel really comfortable with this.)

For our use case, we commonly use basic auth and we'd like to throttle requests by basic auth creds.
Is there a reason for #instance_variable_get(:@env), as opposed to just #env?