refactored login attempts tracking not to reveal too much data