I agree. If I remember well, in old browsers (netscape 4.x, IE 3) when you had enough bad login attempts, you got stuck on the 403 forbidden page and you had t

I agree. If I remember well, in old browsers (netscape 4.x, IE 3) when you had enough bad login attempts, you got stuck on the 403 forbidden page and you had to restart the whole browser just to try to login again. Of course you could have a 403 page with the I fogot my password mechanics; but that was very uncommon. Some servers (Apache) would allow you to do that but that was an exception, not the rule.