fix x-ratelimit middleware