Extra configuration options for login protection

[LarsSven]

The login protection is looking really nice, but there are still some configuration options that we are missing:

1. Being able to separately enable/disable ip-based login protection and user-based login protection
2. A whitelist for IPs that are excluded form ip-based login protection