reset lockout count to zero after lockout duration; add tests for lockout