add random timeout on deny

[Pofilo]

When I receive a lot of requests, I may want to slow down a little bit (this will delay the next request).

Note that:

• I'm not familiar with Go (I did not use any linters..)
• I don't know the consequences of this sleep (will it block other goroutines? how limited is the pool?)