incuna/django-user-management — pull request #71 by NoLogo (2014-10-30 12:27:07+00:00)
Title: OPTIONS requests shouldn't be rate limited

Currently, refreshing a password reset request page (3 or more times) that does an `OPTIONS` to get fields, will block you from requesting the fields for a day.

We should only be rate limiting `POST` requests.

cc @meshy @Ian-Foote