Is your feature request related to a problem? Please describe.
Rate limiting is cutting in for our admin users and locking them out for upto 15 mins. The rate limiting settings are not currently configurable. Some pages involve multiple requests so the default settings don't allow anywhere near as many page loads as it might seem they do.

Describe the solution you'd like
The rate limiting settings in src\service\index.js are hard-coded:

const limiter = rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minutes
  max: 100, // limit each IP to 100 requests per windowMs
});

Make both the window and max requests (within the window) configurable.

Describe alternatives you've considered

We could/should also consider increasing the default max requests or reduce the default window size to make lockouts less likely by default.

Additional context
I will have a crack at raising a PR for this.