Codex's updates...

migrations/001_auth.sql

@@ -0,0 +1,18 @@
+-- Run once on the supplied users schema. Take a database backup first.
+ALTER TABLE users ADD COLUMN user_auth_version INT UNSIGNED NOT NULL DEFAULT 0;
+ALTER TABLE users ENGINE=InnoDB;
+
+CREATE TABLE IF NOT EXISTS password_resets (
+    token_hash CHAR(64) CHARACTER SET ascii COLLATE ascii_bin NOT NULL PRIMARY KEY,
+    user_serial BIGINT UNSIGNED NOT NULL,
+    expires_at DATETIME NOT NULL,
+    INDEX (user_serial),
+    INDEX (expires_at)
+) ENGINE=InnoDB;
+
+CREATE TABLE IF NOT EXISTS auth_attempts (
+    attempt_key CHAR(64) CHARACTER SET ascii COLLATE ascii_bin NOT NULL PRIMARY KEY,
+    attempts INT UNSIGNED NOT NULL DEFAULT 0,
+    window_started DATETIME NOT NULL,
+    INDEX (window_started)
+) ENGINE=InnoDB;