Add default throttle rates for login and password

We should add sane defaults so these views are protected by default.