Any tips on how to define the rate limits for a web app with moderate traffic? For logged and anonymous users?