(todo)	Support SSL certificate authentication.

(todo)	Track authenticated users with cookies.

(done)	Cull log file, otherwise you could fill up the disk with 2^128 unique
	user failure items.

(done)	Check against failure log _every_ time, for local security purposes,
	since local users can more easily subvert the sleep() penalty.

(done)  Detect and force SSL
