Bit late on the update, but we fixed this a couple of weeks ago. Problem was the server didn't detect that each person's IP was different, so if 5 people happened to log in incorrectly once each in a15 minute period, it would lock everybody out for 15 minutes as it looked like everybody was one user.

Anyway it's now fixed.