Test security protection against brute force attacks on the login

[ppazos]

1. check if there is any built-in solution, like IP blocking.
2. check if invalid logins for a valid username generate DOS for that user.
3. check the two step login like the new google login to avoid attacks (analyze pros/cons and if that applies for this context).

[ppazos]

See #302