The app has no user management of it's own. By default, anyone (without a token) can make 30 requests per minute. You can change this in /app/data/env.sh.