[atlas] Rate limiting on the APIs