changed module name from auth to users. Set maximum number of tries to 5. After 5 attempts to login without luck the user's account is disabled.