Deny logging in if:

• X total attempts in the last time period for a given source IP address.

  Y failed attempts in the last time period for a given source IP address.
  To pick up a draggable item, press the space bar. While dragging, use the arrow keys to move the item. Press space again to drop the item in its new position, or press escape to cancel.

Further things:

• Decide if this is tracked via an in-memory data structure or the database. Maybe just support both?
  To pick up a draggable item, press the space bar. While dragging, use the arrow keys to move the item. Press space again to drop the item in its new position, or press escape to cancel.