We are worried about the possibility of a brute force attack on the user portal with FREEPBX. Mostly because it uses the extension number and password. Both of which are usually numbers. Is there a way to make it authenticate using a more traditional user name and password. That or can tweak the system to require users log into freepbx before accessing the User Portal?