fix: FORMS-1303 restrict rate limit to api routes (#1524)

The express rate limiter is now applied globally, so that all routes are included. However, it needs to be restricted to only the API - the Vue files, etc, should not be involved in the rate limiting.

app/app.js

@@ -53,7 +53,7 @@ app.use((_req, res, next) => {
   }
 });
 
-app.use(rateLimiter);
+app.use(config.get('server.basePath') + config.get('server.apiPath'), rateLimiter);
 
 // Frontend configuration endpoint
 apiRouter.use('/config', (_req, res, next) => {