Backend rate-limiter

Give a 429 Too many requests if the backend receives too many requests.

Can be implemented as a middleware component for each incoming request.