Login box notifies the user of throttling

If a user tries to log in too many times (and fails) within a 30 minute
window they are blocked.

refs #283.