rateLimiter doesn't work with multiple instances

[benjamingr]

I have a scenario where I want to limit a user by two things (for example, I want to limit by token and IP address) but rateLimiter always sets headers on the response and these interfere with each other.

There should be an option to turn writing these headers off - I can open a PR if you're interested.