fix(test): dummydata clears tokens on DB reset
fix(auth): simplify rate limit usage, option to apply before authentication.