finished login attempts spec