Unlimited Email Requests During Registration and Password Recovery

I found that on the Indico platform, users can send unlimited emails during registration and password recovery. This could be exploited for spam or abuse.

Suggest adding rate limiting to prevent this.