Add user lockout and captcha

Locks user out for a specific amount of time after consistent incorrect
passwords, and gives a captcha.