fix: apply shared limiters before email / sms is sent (#1748)

fix: apply shared limiters before email / sms is sent (#1748) #1025