"DDoS" isn't a DDoS when it's your own customers all trying to login at the same time.