Added ability to discourage brute force login attacks by penalizing failures.