feat: rate limiting on login attempts

[FrenchGithubUser]

• limit login attempts amount (regardless of the user) for a given ip address
• include the amount of available remaining attempts in the error messages
• send PM to the user when a failed login is made with their username

[baiyou2014]

The backend should be able to record the number of user login errors and IP addresses. Administrators can manually delete records by querying through the backend

[ayanozoro]

For rate limiting we can rate limit user login base on ip address use the redis database use sliding window algo