security : lockout after x login attempts

[dimyy]

Or two factor authorization is great

[rinorway]

I suggest to have an option in the authentication settings that disables the account after X failed logins. (kind of fail2ban)