fixing up login attempts spec