has usable password attempt