Set basic password policy and add bruteforce protection

To see what that does, see: https://github.com/keycloak/keycloak-documentation/blob/master/server_admin/topics/threat/brute-force.adoc and https://github.com/keycloak/keycloak-documentation/blob/master/server_admin/topics/authentication/password-policies.adoc