[TestFixture]
class ApiAccessControlFeature
{
  [Test]
   public void users_should_be_rate_limited()
   {
        var user = new UserToken();

        RateLimitIsExceededBy(user, 1.Minute.Ago());

        var result = ARequestIsMadeBy(user);

    UserIsRequestedToBackOff(result);
   }
}