Add throttle to vulnerable auth and setting routes

[valorin]

Adding missing rate limiting to the following routes to make brute-force attacks harder:

• User Registration
• Forgot Password
• Reset Password
• Password confirmation
• Password change

[taylorotwell]

Blocks legit users because it throttles on IP.