flood control on login (WIP)