add brute_force password checker