Not sure it's fair to limit user login attempts to 10 in a day