Rate limiting the password reset request endpoint - Better Auth