Fix a major bug in ChooseTokenBucketCapacity.
Fix a major bug in ChooseTokenBucketCapacity.

We forgot to take into account the constant N, meaning that our error
was bounded to 100% rather than 2%.

jacobsa/ratelimit