Add Retry-After header to response in middleware

[jsocol]

After #165, it should be fairly quick to add an actual Retry-After header in the middleware, provided:

1. it's opted-into via a setting, and
2. it hasn't already been added by the RATELIMIT_VIEW.