Some comment(s):

- You want to have captcha for 2 successive failed login attempts.