now asks for codeword when user gets it wrong