Tagged brute-force

Allow a login attempt or lock the account out, from its recent failed attempts, with the seconds until it may retry.