counting DOWN the login attempts
AuthUser extends UserDetails !
Repo implements Spring's UserDetailsManager!
-remove "getUser()' - there is "loadUserByUsername()'
-change 'setPassword' to return void (like super)