Currently, if I try to log in, and type my password incorrectly, I have to wait about 5 seconds before I can re-enter the password. That happens fairly often for me, because my password is reasonably long, so the wait can be quite annoying.

I appreciate a wait is good defence against brute force, but even a 1 second wait is enough to make a dictionary attack pretty painful, and would be good enough for most purposes. 

Could this wait time be made configurable? I'd also suggest a shorter default, maybe 2 seconds.

On a related note, there is no feedback (visual or otherwise) that the wait period is over, so I probably wait longer than I need to most times. Could the wrong password input be greyed out while the password is being processed, and then cleared after the wait is over?

Reproducible: Always