add limit-login-attempts plugin