Rate limit clients

Currently clients can create an arbitrary amount of rooms in an arbitrary amount of time. It would be wise to rate limit clients by ip

e.g.

create only 1 room every 10 seconds

update only 3 rooms every 30 seconds

or something like that..

This would require to log IP addresses