Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 5.5.1 to 7.2.0.
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v5.5.1...v7.2.0)

---
updated-dependencies:
- dependency-name: express-rate-limit
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

The significant update for this dependabot necessitated changes in OED's
usage of express-rate-limit. These were:
- Create a limiter with a function call and not with new.
- max -> limit (desired but not required).
- Use standard headers and not legacy ones. Not required and probably
does not matter for OED but good practice.