added: count-based ratelimiting