fix for sessionless api limits

app/logical/anonymous_user.rb

@@ -181,8 +181,12 @@ class AnonymousUser
     true
   end
   
-  def api_hourly_limit
+  def api_hourly_limit(idempotent = false)
-    500
+    if idempotent
+      500
+    else
+      5
+    end
   end
   
   def statement_timeout