Simulates insecure login flow without password hashing, no account lockout, and insecure tokens.
Demonstrates secure password hashing, account lockout after failed attempts, and JWT token usage.