There have been some abuses of the API and specifically auth pages going on, so we are adding in rate limits to help deal with this. This will be ongoing for a little while we deploy new rate limits, check the impact, etc.
In regards to this thread specifically, it sounds like a fix is already out and the initial implementation was sending too many unnecessary auth API calls, which surfaced the issue.