added Security-class (plus test cases) which right now only provides method to check if the user is allowed to login or currently blocked because of too many failed login attempts.
fixed the implementation and the test cases to actually regard the timeout span, which indicates how long the user will be blocked out after too many failed login attempts.