add brute force protection rules