limit max login attempts

Added param "max_times_retry_login". If keep trying to login too many
times, it may trigger security alarm on the CAS server. This issue is
now fixed.
Also changed the schema of dict config. Now the intervals & max times
become integers.