removed fs dep (it's a core module), changed rate limiting to use xff rather than ip [Finishes #80051580]