Missing brute force protection for passwords of password protected share links