Do not throttle login requests except POST requests

Follow up from #71 
Just needs a rename I think.