V14: Lock out users

[Zeegaan]

Notes

• Remove the validation of credentials first, as this is not needed.
  Brif history on why: it's because deploy needed a way to validate credentials, without logging the user in, thus ValidateCredentialsAsync was created.
  Thus it is safe to remove this validation, as PasswordSignInAsync will validate the password, increment the lockout count etc all on its own.

How to test

• Create a new user (remember the email and password)
• Log in with the user just to activate it
• Log out again
• Try to log in with the WRONG password more than 5 times
• Try to log in with the right password, this should now fail as the user is locked out 😁