allow duplicate email addresses if option is set

'allow_multiple_emails' in modx_system_settings added if needed.
update user blocking logic

1) After a failed login it will indicate the number of attempts left.

2) If you have too many logins it would say it is a temporary block
(give the time) and suggest waiting or resetting the password

3) The block would be truly temporary. I.e. if you wait you can try
again.

4) If temporarily blocked you would be able to request the password
reset at any time and it will unblock.

5) add msg if landing after reset is id of another weblogin page
6) allow password reset to work with duplicate email addresses