Fix saving double failed login attempts

Previously, the users.failed_attempts column was incremented by 2 instead of 1 after a failed login attempt. Fix that and decrease maximum_attempts to 5 instead of 10.

Changelog: fixed