## Is your feature request related to a problem?

It's possible to brute-force passwords if you're particularly determined

## Describe the solution you'd like

Install `django-axes`: https://django-axes.readthedocs.io/en/latest/2_installation.html


## Describe alternatives you've considered



## Additional context



#### *Thank you* for your feature request – we love each and every one!

posthog/api/test/test_action.py
"email": "person@email.com",
                },
            },
            content_type="application/json",
            HTTP_ORIGIN="http://testserver",
        ).json()
        action = Action.objects.get()
        action.calculate_events()
        steps = action.steps.all().order_by("id")
        self.assertEqual(action.name, "user signed up 2")
        self.assertEqual(steps[0].text, "sign up NOW")
        self.assertEqual(steps[1].href, "/a-new-link")
        self.assertEqual(action.events.get(), event2)
        self.assertEqual(action.events.count(), 1)
        
        with self.assertNumQueries(6):
            response = self.client.get("/api/action/")
        
        response = self.client.patch(
            "/api/action/%s/" % action.pk,
            data={"name": "user signed up 2", "steps": [],},
            content_type="application/json",
            HTTP_ORIGIN="http://testserver",
        ).json()
        self.assertEqual(ActionStep.objects.count(), 0)
    
    
    
    
    def test_create_from_other_domain(self, patch_delay):