By: Michael Lynch <git@mtlynch.io>
Preserve login rate limiting for email auth Keep the in-memory ratelimit package on the intermediate email-auth branch and apply it to POST /login token requests so repeated login attempts still receive a 429 response.