Add 3-strikes policy.

Needs more work. I want to make the amount of strikes configurable (via
euphorie.ini).

Additionally, the user is currently not warned about this at all (still to be
discussed with Wichert whether this feature should be enabled for vanilla
Euphorie).
Lock out users after X amount of failed login attempts.

Can be configured (and turned off) in euphorie.ini