allow only 3 attempts for basic login. Refs #16949

 after 3 unsuccessful attempts - allow to proceed,
  but set request attribute, that authorization failed.
do not set authorization info to cdr request if auth attempts were unsuccessful. Refs #16949
do not show cdr files in user files table. Refs #16949

hide files table if there are no files to show.
allow to download project files. Refs #16949