Add rate-limiting to Registration step to minimise signup spam