Login process records failed login attempts and sets user account to suspended.  Login form elements disabled dependent on suspended state.

Still need to make cron job to un-suspend after defined time period.