head-of-ops console - authorized access only

3 failed attempts locks the account. Recovery is via admin code.