Blocking account after N unsuccessful sign in tries

[alex-cit]

After 5 unsuccessful sign in tries, user is blocked for 5 min. Login can be unblocked via link sent to their email.
When repeated, they are blocked for 1 hour.

See: https://github.com/MerginMaps/product/issues/91