a couple minor IE fixes
show vest button for journal manager, fixes #131
ensure ratelimit on login is per IP
try ratelimit just based on per minute for login