We should have some sort of rate limiting middleware where unauthenticated users can only make a reasonable amount of requests per second