title: Rails state and sleep?
body: <p>I'm writing a Rails application and I'm really focusing on security. Subsequently, one approach I'm taking to reduce brute-force attacks is to <code>sleep 2</code> after any login request that fails. This adds significant time to a bot making it nearly impossible to brute force. (I'm also only allowing so many requests per IP, etc). </p>
  
  <p>However, when I <code>sleep 2</code>, are all other requests also halted for 2 seconds? I know rails isn't entirely threadsafe yet (although there's a commented out option for <code>threadsafe!</code> in config files...</p>
  
  <p>Is there a better approach and/or a way to only sleep for the brute forcer's thread?</p>