Test account login brute force protection and IP-based rate limiting bypasses (e.g. X-Forwarded-For, X-Real-IP).