Rate-limit requests globally

[cadomani]

Requests should be rate-limited globally rather than per-user as to not exhaust dyno resources, cooldown should depend on server limits. Also implement a watcher to reject duplicate requests.