Add security feature spec

Add a feature spec for security testing.  Currently, the security spec
ensures that a user is logged out after 10 unsuccessful login attempts.