The things you only find out by trying them

Two hardening steps, written, tested on the copy at home and then carried over to the real site. The steps aren't the part worth keeping. The four bugs are, and they only showed up because I actually tried things. One of them would have triggered the lockout halfway through the allowed attempts.