Changes

* ''When an account has been locked for exceeding the alloted allotted number of attempts, after the lockout time has passed they are permitted only one attempt at the correct password. A single incorrect password at this point will re-lock the account for the configured lockout duration. In other words, once someone is on the "locked user" list they are only permitted a single wrong attempt and they will be locked for the lockout duration again. This prevents would-be intruders from having multiple attempts to guess the password each time the lockout duration has passed. ''

'''Intruder Alert Email Variables''' – because the [[User|user]] in is not logged into the system , the amount of information available is limited to IP Address '''@ip@''', the attempted username '''@username@''' and time '''@time@'''of the attempted login.