Repeated failed authorization attempts should be limited (BB-3808)

Bitbucket does not currently limit the frequency or number of authorization attempts.

Options to introduce a limit after //n// failed attempts include:

• a captch
• throttling HTTP requests
• locking the target account
• blocking the requesting IP for a certain amount of time