Added a table specifically for failed logins; removed data from 'users'
Added ability to create 'local' (non-OpenId) users
Added an option to specify shortest password length allowable in config.
Failed login throttling is now per-IP, not per-user