This version fixes the sessions feature was not working correctly, and also implements another security feature. The panic tokens.

The panic token is a feature to prevent brute force attacks, after too many fail login tries, a token will be requested instead, until the token is inserted correctly, the IP of the client who is trying to access the account will be blocked for a limited configurable period of time.

As everything in this plugin, this is a per-user option, to use panic tokens, use the new command /account protect