After five failed attempts, sign-in is temporarily throttled for security.