Make it harder to brute force user logins

[tiffz]

It's no good to have it too easy for someone to just brute force passwords! I wonder if we can try to prevent brute forcing the cookies too. I guess in maybe we could make the session information there long enough that it'd be theoretically impossible to guess before a cookie expired.

[NoiSek]

As long as everyone uses an emoji password I can't see this ever becoming an issue, the character space is just too large to reasonably bruteforce.

[NoiSek]

🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥

[tiffz]

Noddy, it's not safe to post your password publicly online.