clarify rate limiter messages

This clarifies the request was blocked, and on what grounds (e.g. email vs IP). We drop the personal details like first / last name because it seems superfluous.

This will make it easier to pick up in Prometheus / mtail to get proper monitoring as well.