apply rate limiter to API v3 endpoints

packages/app/src/server/routes/index.js

@@ -57,15 +57,15 @@ module.exports = function(crowi, app) {
 
   app.use('/api-docs', require('./apiv3/docs')(crowi));
 
+  // API rate limiter
+  app.use(apiRateLimiter);
+
   // API v3 for admin
   app.use('/_api/v3', apiV3AdminRouter);
 
   // API v3 for auth
   app.use('/_api/v3', apiV3AuthRouter);
 
-  // API rate limiter
-  app.use(apiRateLimiter);
-
   app.get('/'                         , applicationInstalled, unavailableWhenMaintenanceMode, loginRequired, autoReconnectToSearch, injectUserUISettings, page.showTopPage);
 
   app.get('/login/error/:reason'      , applicationInstalled, login.error);