rate limit requests

ratelimit-req.js

ratelimit.rateLimitReq = function(req, res, next) {
	if (!req.session) {
		return next();
	}

	req.session.lastRequestTime = req.session.lastRequestTime || 0;
	var now = Date.now();
	if (now - req.session.lastRequestTime < 200) {
		if (res.locals.isAPI) {
			res.status(429).json('too-many-requests');
		} else {
			res.status(429).send('too-many-requests');
		}
		return;
	}
	req.session.lastRequestTime = now;
	next();
};