add login rate limits to local settings