Enforce rate limit of maximum 10 calls per minute
per logged-in user on changing username

Changelog: added