Different approach to rate-limiting user session accesses