Give users 2 minutes to login after failed authentication.