Add Rate Limiting for certificate and Remember me token authentication methods

Currently rate limiting only applies to requests with an authorization header that starts with Basic or Bearer. It does not seek to rate limit things like UI requests (which use a remember-me token) or OAuth requests.

This makes this functionality pointless for all Bitbucket instances that rely on these other forms of authentication.  Please consider including these other types of communication as well as certificate based authentication when thinking about Rate Limiting