Added HTML5 min-length to password field
Now we're logging both valid and invalid login attempts.
This is the basics for  a bruteforce-protection later on.