Throttle username logins

Could this be explained with a comment/docstring, please?