What these tokens supposed to do in web.config there is no difference if their value change
maxInvalidPasswordAttempts = "3"
passwordAttemptWindow="10"