Prevent continious bad username/password attempts

Working on logout function, not tested/complete