Externalize lockout parameters

We'd like to be able to customise some of the password lockout parameters in line with corporate requirements etc.