Lockout accounts after failed login attempts

Lockout a user and and admin user after 10 failed login attempts.
Lockout for a full 24 hours.