Resolve Website Login Error

My site is suffering from a technical error: nobody can log in. Each attempt immediately returns an “Account locked” message, even with correct credentials. There are no broken links or visible JavaScript errors on the page—just this persistent authentication failure.

I need you to trace the root cause in the existing codebase and server configuration, repair it, and confirm that normal login flows work again. Feel free to inspect session handling, database queries, password-hash checks, or any rate-limit logic that might be triggering the lockout.

Deliverable: updated code or configuration plus a short report documenting what you changed and proof (screenshots or screencast) that a standard user can sign in successfully.