Login Disable 7.x-1.xxx, xxxx-xx-xx (development version)
------------------------

Login Disable 7.x-1.4, 2026-07-15
-----------------------
- Security: Addresses the lack of flood control on the disabled login form, which allowed the optional access key to be brute-forced via unlimited unthrottled URL requests.

Login Disable 7.x-1.3, 2026-03-11
-----------------------
- Security: Enforce access key check in hook_user_login and add tests to cover login bypass logic.
