Block user for X minutes if after Y failed login attempts. Also with
integration tests