Users now have three attempts to authenticate and up to 1 minute for each