Reject throttled requests with HTTP 429 too-many-reqests
Provide information to client via headers:
X-Ratelimit-Remaining
number of remaining requests in windowX-Ratelimit-Limit
total number of requests allowed in a windowX-Ratelimit-Retry-After
when current throttling stops