API rate limiting

Rate limiting is adjusted to keep XTRF operational under heavy load. There are no pre-defined and constant rate limits.

If exceeded, a standard 429 HTTP response code is issued that requires retrying after a delay.