diff --git a/server.js b/server.js
index 68c8580..a70e216 100644
--- a/server.js
+++ b/server.js
@@ -77,9 +77,9 @@ app.use(express.json({ limit: '10mb' }));
 // ============================================================
 // RATE LIMITING
 // ============================================================
-// General API: 60 req/min
+// General API: 200 req/min (increased — app makes many calls on login)
 app.use('/api/', rateLimit({
-  windowMs: 60000, max: 60,
+  windowMs: 60000, max: 200,
   message: { error: 'Too many requests' },
   standardHeaders: true, legacyHeaders: false
 }));