code clean, add max login attempts before kick