Add rate limiter middleware, improve error handler and clean up a little

Using a popular package for this job. The rates allowed will have to be adjusted.

Jon, please have a look. I've removed some things.