- [x] Lock user after X failed login attempts. - [x] track user's last login time & last login IP (at least in logs).