Properly limit requests to /reservations endpoint

[igordavydsson]

Only frontend should be allowed.

[igordavydsson]

Only reasonable thing we can do is to place a rate limit for requests through nginx config.