The implementation enforces a timeout of one minute after three or more incorrect login attempts for an account. Fixes #8