implement rate limiting for admin api

[flohoch]

as discussed in the meeting @philprime

[philprime]

@flohoch please add your notes to this issue so we can find it again in the future