Implement rate-limiting

http://www.vinaysahni.com/best-practices-for-a-pragmatic-restful-api#rate-limiting
Actually I see that the `restful_token_auth` module also uses the _includes_ approach.