Prepared throttling as brute-force protection
Added throttling for sign in (password guessing)

Thanks, robin @ HackerOne!
Added throttling for sign up (account spamming)

Thanks, faisalahmed @ HackerOne!
Added throttling for creation of new projects

Thanks, faisalahmed @ HackerOne!