Added basic rate limiting to slow down brute-force attacks