lock out users that try to register more than three invalid codes at a time