Default pam settings should be tweaked

Currently only 3 retries is allowed before getting locked out for 10 minutes.

Demouser account:
```
The account is locked due to 3 failed logins.
(10 minutes left to unlock)
```