You must not exceed 120 requests per 60 seconds

The rate limits have been in place since 1st July 2017:

The limits are:

3600 requests per user per hour
120 requests per user per minute
5 token refreshes per minute

Yours,
Andy Stewart