The issue is compounded when you consider “If You Use Twitch for Login to Your App, You Must Validate Every Request”
Possible solution:
Duplicate https://api.twitch.tv/kraken/ on https://api.twitch.tv/helix/ and make https://api.twitch.tv/helix/ be rate limit free?