More efficient to have SUM calls dependent on failed_login being past limit