3 ms·Clearly the user id would be removed from the URL, and rate limiting can be done by IP address.by fullstop 5y agoClearly the user id would be removed from the URL, and rate limiting can be done by IP address.