Add a comment about postEvent being called twice for login-failure