Merged OIDC validation changes (#271) with rate limiting (#272) Both features are now active together