When a user gets their account locked out from entering too many incorrect passwords they have the ability to unlock their own account. The problem with that is they have no idea they can do that!! A simple request of a new password (the forgot your password link) will reset any locked account. I get so many emails about users asking me to reset locked accounts, that it is really becoming very time consuming. Please please please add some language to the 'you are locked out' message that will give the user some instructions on how to unlock their own account.