Throttling Rails logins with Rack Attack