Login throttling is a security mechanism and not a protocol (#2280)