fix race conditions in authentication lockout test