0518f3f8

By: Michael Lynch <git@mtlynch.io>

Unify login rate limit checks

Route magic login attempts through one limiter call that evaluates the existing global limit and the new per-IPv4 limit together. This avoids layering independent limiter paths that can drift apart or skip shared context.