Default max_failed_login_count to 5

Update documentation accordingly.

This prevents brute force attacks to gain access to users' accounts.

Fixes 0026794