title: django admin how to prevent brute force attack?
body: <p>CAPTHCA/additional table field/allowed ip's - not propose. <br>
  I think best option is: keep login attempts in server cache. <br>
  If you can propound other options or cut up option with cache, you are welcome.</p>