Bug fix: Set user.lockedUntil to null rather than delete it to play nice with SQL-backed UserStore (otherwise field is never updated and failedLoginAttempts is always set back to 0)
0.0.5