Testing for Weak lock out mechanism (OWASP-AT-004)