bug(auth): The rule for verifySessionCode should have been on uid

[dschom]

Because

• Rate limit lib was throwing on error when checking on verifySessionCode with customs.checkAuthenticated

This pull request

• Fixes the rate-limit rule

Issue that this pull request solves

Closes: (issue number)

Checklist

Put an x in the boxes that apply

• My commit is GPG signed.
• If applicable, I have modified or added tests which pass locally.
• I have added necessary documentation (if appropriate).
• I have verified that my changes render correctly in RTL (if appropriate).

Screenshots (Optional)

Please attach the screenshots of the changes made in case of change in user interface.

Other information (Optional)

Any other information that is important to this pull request.