* Add ipban for failed login attempt in new login flow * Address review comment * Use decorator to clean up code