7Username enumeration via account lock

In this case we make 5 request per each account to lock an account and see if that account exists