+ AuthenticationFailureListener

plus: support " auth failure, inc counter in the DB - login in the
processor !