Correct versions of login_security and session_cookie_lifetime
[#25808] Users should be forced to log in whenever they return to the site (0 life sessions)
[#25809] Soft block users after 5 failed login attemps
[#25810] Display the last login date and time
Merge branch '7.x-2.x' into 7.x-2.x-security
Merge pull request #270 from previousnext/7.x-2.x-security

7.x 2.x security