add pen tests for the rate limiter and jsonl logging