API Key rate limiting confusion - Better Auth