EITHER we require codehost authentication (no built-in auth) OR we need to improve our built-in auth security

Created by: christinaforney

2FA

Lockout after X incorrect login attempts

Add IP address to event logs