## Is your feature request related to a problem?

It's possible to brute-force passwords if you're particularly determined

## Describe the solution you'd like

Install `django-axes`: https://django-axes.readthedocs.io/en/latest/2_installation.html


## Describe alternatives you've considered



## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/test/test_action.py
TESTS_API = True
    def test_create_and_update_action(self, patch_delay):
        Event.objects.create(
            team=self.team,
            event="$autocapture",
            elements=[Element(tag_name="button", text="sign up NOW"), Element(tag_name="div"),],
        )
        response = self.client.post(
            "/api/action/",
            data={
                "name": "user signed up",
                "steps": [{"text": "sign up", "selector": "div > button", "url": "/signup", "isNew": "asdf",}],
            },
            content_type="application/json",
            HTTP_ORIGIN="http://testserver",
        ).json()
        action = Action.objects.get()
        self.assertEqual(action.name, "user signed up")
        self.assertEqual(action.team, self.team)
        self.assertEqual(action.steps.get().selector, "div > button")
        self.assertEqual(response["steps"][0]["text"], "sign up")
        
        user2 = self._create_user("tim2")
        self.client.force_login(user2)
        
        response = self.client.post(
            "/api/action",
            data={"name": "user signed up"},