Enforce max 20 calls per mintue per IP address on
internal API endpoint /users/:username/exists,
used by the registration to perform a client-side
validation for uniqueness of the chosen username

Changelog: added