propagate login attempts to API