Add a rate limiter to the OAuth App creation endpoint and ensure registered apps are assigned to users.
