login with fail counter