corr: user model (login attempts)