Added rate limiting for accounts to prevent brute force attacks.

Added two new options to accounts, one to enable and set the number of allowed failed login attempts, the second to set a lockout time period if that limit has been reached.

This is to prevent old-fashioned brute force attacks on accounts. Note that I only added this to the account_password package, but this could also probably be applied to other authentication methods as well.