Tune rate limits and cover missing endpoints

Rate limits were too tight for normal signup flow; adjusted and added missing endpoint coverage.