[Auth] Should allow sending of emails for failed password attempts

[lonnieezell]

When the number of failed attempts reaches the threshold for adding time between attempts, the system should be able to send out failed login attempt emails. However, there must be some mechanism to restrict the number of times it sends the email so a user doesn't get bombarded in the case of a brute force attack. Maybe just once per X minutes? Also configurable.