Methods
login
This method takes email and password as parameter and returns the response which contains success and message.
More about it
You don't have to add additional code to prevent bruteforce attacks or any other security isuues. This method has all the security features you need.