Safer logins: two-step login, lockouts and leaked-password check

Two-step login with an authenticator app, automatic lockout after too many wrong passwords, a warning when a password has appeared in a known data leak, and a log of login attempts.