By: Michael Lynch <git@mtlynch.io>
Use generic keyed rate limiter Replace the email-auth conflict resolution with the master sliding-window rate limiter shape while keeping user IDs at the Allow callsite for email-based auth.