Rate limiting for tutorial endpoint

We need to add some rate limiting to avoid users overwhelming the tutorial endpoint.

Perhaps a limit of 1 function per user.

May be worth thinking about what type of general policies we might like to expose on endpoints.