User info, and authenticated rate limit