diff --git a/start/routes.ts b/start/routes.ts
index 6f39fca..b749daf 100644
--- a/start/routes.ts
+++ b/start/routes.ts
@@ -25,7 +25,10 @@ router
     router.post('/register', [AuthController, 'register']).use(throttle)
     router.post('/logout', [AuthController, 'logout'])
     router.get('/autocomplete', [AuthController, 'listNames']).use(throttle)
-    router.post('/test', [AuthController, 'testCredentials']).use(throttle).use(middleware.auth())
+    router
+      .post('/test', [AuthController, 'testCredentials'])
+      .use(authThrottle)
+      .use(middleware.auth())
     router.get('/status', [AuthController, 'status']).use(middleware.auth())
     // TODO: Magic link login
     // router.get('/auth/magic-link', 'AuthController.magicLink').use(throttle)
@@ -82,7 +85,7 @@ router
   .group(() => {
     router.post('/', [MealsController, 'create']).use(middleware.internal())
     router.get('/', [MealsController, 'index']).use(middleware.auth())
-    router.post('/:id', [MealsController, 'registerForMeal']).use(middleware.auth())
+    router.post('/:id', [MealsController, 'registerForMeal']).use(middleware.auth()).use(throttle)
   })
   .prefix('/meals')