Do not throttle login requests except POST requests

Follow up from #71