Security fix: Waiting before retrying password reset

config/auth.php

@@ -97,6 +97,7 @@ return [
             'provider' => 'users',
             'table' => 'password_resets',
             'expire' => 60,
+            'timeout' => 60,
         ],
     ],
 

resources/lang/en/passwords.php

@@ -17,5 +17,6 @@ return [
     'sent' => 'We have e-mailed your password reset link!',
     'token' => 'This password reset token is invalid.',
     'user' => "We can't find a user with that e-mail address.",
+    'timeout' => 'Please wait before retrying.',
 
 ];