protecting routes using auth.getUser causes "Request rate limit reached" - Supabase