add PostAuthenticateLocalAsync
reset lock count on login success