Throttle requests by ASP.NET identity username