API: fixed bad login throttling bug (i hope)