(Your IP will be logged as a salted hash for 1-hour alongside your login attempt count)