brute force protection

Currently it is turned off as I haven't finished it yet and it needs review