anvil: Added PENALTY-DUMP command to dump penalty state. --HG-- branch : HEAD

auth/anvil: Penalty is no longer increased if the same user+pass combination was recently used. This should avoid penalty increasing for IPs where a user's misconfigured client tries to keep authenticating with wrong user/pass. This check works only for plaintext authentication. Currently the code that keeps track of what user/passwords have been tried is pretty simple, and hardcoded to remember max. 10 of them. --HG-- branch : HEAD

anvil: Added support for penalty tracking. --HG-- branch : HEAD