allow multiple valid attempts