Add brute force protection on login POST.