Soft rate-limiting

[Dragon1320]

Implement rate-limiting by ip and token (make be needed later). Currently, make it so it only tracks request count and logs it, or logs is when it hits a certain threshold. This needs to be done to determine an appropriate set of limits.