add optional rate limiter bypass header

safely bump npm dependencies