could be a bug in an early version, but disabling the rate limiter is not a good idea, it is there to protect against attacks.
My guess, IP is not being reported correctly to Discourse cause the site is behind a load balancer and every request looks like it is from the same ip.