Rate limiting on authentication and registration endpoints

[aumetra]

https://github.com/benwis/tower-governor

(It's just gonna be interesting to see how we will handle that on the GraphQL registration mutation)

[aumetra]

Nevermind. That crate can't do distributed rate limiting (i.e. sync the rate limiting keys between nodes)