Rate Limiting, fixes #35

Fixes #35 
Also, please make these configurable. We should not be making these decisions categorically for all servers. We can provide "sane defaults", but these settings belong in the configuration and should be overridable by sysadmins.