fix(api): update mobile-auth ratelimit config (#49194)

* fix(api): use proper name for collection

* fix(api): use the x-forwarded-for ip address

api-server/src/server/middlewares/rate-limit.js

@@ -11,7 +11,11 @@ export default function rateLimitMiddleware() {
     max: 10,
     standardHeaders: true,
     legacyHeaders: false,
+    keyGenerator: req => {
+      return req.headers['x-forwarded-for'] || 'localhost';
+    },
     store: new MongoStore({
+      collectionName: 'UserRateLimit',
       uri: url,
       expireTimeMs: 15 * 60 * 1000
     })