tor users trip the rate limiter

@gaba noticed that, from tor browser, we quickly hit the rate limiter... we should probably add an exception for tor?