Allow more fine-grained throttling of login attempts