[Catalyst] Rate limiting password attacks

[Christian Storm]

>
> I like the idea of the captcha after a few failed requests.  Although,
> if it's a real person having problems logging in then the addition of
> the captcha just make it that much more likely that they will not be
> able to login.  Kind of amazing how often I fail the captcha.
>
> Plus, captcha's are not great for accessibility.

recaptcha has an audio option.  Plus your helping a good cause
of OCRing books from the Internet Archive.