> As you could imagine, it takes several tries, dozen or two, maybe even three - depending on that cool password validator of yours.
That's confusing. Are you saying 3 dozen login attempts for an existing account shouldn't trigger a lock out?
That seems unusual. ;)