tests for rate limiting