Bruteforcing is blocked; passwords need sufficient length and complexity (uncommented until release); form has nonce
Login securities implemented and tested
Clean up