update all projects to Identity 2.0 RTM, add account lockout for failed ...

...login attempts