Add support for account lockout (fix #58)

This adds the feature described in #58.
s/xs/lf/ in comment to match the change in code?