Vaultwarden 1.37.3 hardens pre-login rate limiting and revokes 2FA remember tokens

Vaultwarden 1.37.3, released on September 13, 2026, adds rate limiting to the pre-login and auth request endpoints and revokes 2FA remember tokens when credentials change. For a self-hoster, it is a security update to apply without delay.