password_lockout tests: add assertLoginFailure()