⏱️ Session timeout: 30 minutes
🛡️ Rate limiting: 5 attempts per 15 minutes