Change normalize.css with reset.css
Limit login attempts
user can login with emailaddress