Reset on success — a single successful login sends the failure-count value straight back to zero