When a user enters the incorrect password too many times, their account gets locked for 30 minutes.  The user, however, is not informed that it will automatically unlock in 30 minutes and usually makes unnecessary calls and support tickets instead of just waiting it out.  Adding that information to the "Account Locked" message would be helpful.