SECURITY: rate limit user/password login
Merge remote-tracking branch 'origin/stable' into pkgr