extract method #max_login_attempts

Respects Law of Demeter; useful for stubbing out methods on instance; useful for apps utilizing the NullObject pattern for guest user accounts.