Add rate limiting rules

[kevinmirc]

• Add a generic rule for the entire API
• Add more strict rate-limiting for POST /event-registrations
  Strong rate-limiting settings should be set for this endpoint. We have a default capacity for each event of 200 to limit the amount of DB capacity a malicious user could fill. Should consider a stronger rate limit, time delay, or other options.