Send email only once in brute-force logins