Add rate limiting of login attempts

[ThiefMaster]

Mostly for form-based login systems this would be useful to prevent people from guessing/brute-forcing passwords.