Implement de-dupplication on rate limits. Now only attempts for distinct usernames will count as a hit.