user input validation
brute force detection