Add id verification to bypass ratelimiting

This case is already covered by `should not limit if id returns `false`.