sliding window rate limitation for sign in (#438) (1b4273c)
BREAKING CHANGES
implements new rate limiting algorithm using sliding window. While overall the mechanics of rate limiting remain the same - it's now harder to lock out the ip completely as each unsuccessful attempt wont extend login attempt capture duration for another . Consult with the docs on a new configuration format for the rate limiter
removes scrypt for built-in crypto implementation, while API remains the same the underlaying library is slightly different. Node has changed a major version, too