Add rate-limiting for account recovery and registration (#3093)

Add rate-limiting for account recovery and registration (#3093) #1748