Add Back-Off functionallity

 - APP_FAILED_LOGIN_BACKOFF_COUNT can be set to number of accepted failures
 - From manage/users administrators can reset fail counter
 - Users are locked number of minutes defined in APP_FAILED_LOGIN_BACKOFF_MINUTES
Merge branch 'PR4'