Auth: debug/introspection, shorter cookie TTL, bad pass feedback (issue #767)
Lock spam begone, for now