No rate limit on main Login page lead to account takeover

Hi Team,

Summary:

As a best practice a login page should have a rate limit to avoid any kind of brute force.

Aslo The password policy used in the account creation and password change pages is weak, allowing to set a password of only 1 character.