Add rate limiting for esdb API

using rack-attack we could protect the ESDB API in the same way that we already protect the ggtracker webapp.

We ask people to not hit the API more than once per second, but some people probably are and it probably reduces quality of service for all the innocent users out there.
