I have just created a brand new project with the auth package.
I added a mock user and I tested the throttle login functionality.
When I reach the limit, the "sendLockoutResponse()" should send back the http status 429 (HTTP_TOO_MANY_REQUESTS) but instead the response is 200.
Is this a bug or I'm missing something in the response flow? What do I have to check?