login failures now uniformly reported