Add ability to audit failed logins attempts

Separate authentication strike (excessive login attempts) count from timeout
enforcement.