Added a lockout mechanism that locks users out after a fixed number of incorrect login attempts