feat: ban a user after too many failed attempts

configuration.example.ini

@@ -128,8 +128,12 @@ port = 64738
 #web_logfile =
 
 # 'auth_method': Method used to authenticate users accessing the web interface.
-#                Options are 'none', 'password' or 'token' (use unique token, see requests_webinterface_access command)
+#                Options are 'none', 'password' or 'token' (use unique token, see
+#                requests_webinterface_access command)
+# 'max_attempts': Bad access attempts before being banned. Regenerating a token or
+#                 rebooting the bot will reset this attempts tally.
 #auth_method = token
+#max_attempts = 10
 
 # 'user', 'password': If auth_method set to 'password', you need to set the username and
 #                     password.