Replace "will" with "may", since things are not always logged, only if log level is set to debug.
Adding LoginAttempt model and removing lastLoginAttempt from User
Rewriting auth.verify()

Adding:

1. better anti-DoS and anti-bruteforce protection
2. a bit of timing attack mitigation on valid usernames
Using now from the closure instead of passing it explicitely.
Adding reCAPTCHA client and UI module
Integrating reCAPTCHA with login form
Adding CSS style for reCAPTCHA frame
Add recaptcha module to dependencies
Lazy init for ReCaptcha object.

 (so that keys can be loaded from config)
Typo fixed.
Using white reCAPTCHA theme instead of red.
Stubbing ReCaptcha methods 

(so that linter does not complain).
Fixing typo in has_captcha.
Do not check for DoS if captcha was solved.
Adding quotes to attributes in HTML markup
Merge pull request #21 from esseks/master

Mitigating DoS, remote password bruteforce and timing attacks. Adding CAPTCHAs.