question

No, it's because we limit all API calls, to prevent issues. Most Client API calls are limited to a few dozen per minute (max), but login calls are more restricted, since a player, realistically, shouldn't be signing into their account more than a few times a minute. Right now, this monitoring is per IP Address as well, so if your test team all sit behind a router that makes them appear to be one IP Address, that could be an issue. We'll be moving to session-based tracking of the rate limit later this year, as part of providing an updated login model.