I think that the account store getter/setter should be in the _LoginAttempt_ interface, since that looks like it could be used for any authentication type that we support in the future.