By: Michael Lynch <git@mtlynch.io>
Restore global login rate limit Enforce the design requirement of 2 login email attempts per user and 8 attempts globally per trailing 24-hour window while keeping the generic Limiter API.