Make login attempt function protected.