Handle nil failed_attempts

This could be an issue for apps using devise from a long time ago. Personally I had about 10% users with nil `failed_attempts`.