Add password strength requirements and account lockout for login failure...

...s