Rate limiter returns 500 instead of 429 under load

When the per-minute quota is exceeded the API sometimes returns a 500 with an empty body instead of a proper 429 with Retry-After.