Add default throttle rates

* Limit GetToken requests to 10/hour
* Limit PasswordResetEmail requests to 3/hour
Merge pull request #56 from incuna/default-throttling

Add default throttle rates for login and password