Wrong password lock safety

Account is locked for 5 minutes after 3 consecutive failed attempts, and
before login is allowed, blocked status of the account is checked