allow for simulating more than one attempt per user