Create a mechanism to prevent brut force attack
After a failed login user must wait between each login attempt. timer = Failed logins X 10 seconds