edd4981e

By: Michael Lynch <git@mtlynch.io>

Restore global login rate limit

Enforce the design requirement of 2 login email attempts per user and 8 attempts globally per trailing 24-hour window while keeping the generic Limiter API.