Failed Login Count Not Resetting Correctly

[ColinBuyck]

1. A user runs through their allowed failed password attempts.
2. They wait the 30 minutes and fail their password again.
3. Instead of showing a fresh count of the allowed password remaining value they will have unlimited password attempts and see a negative failed attempts remaining count. They are still able to log in and after they do, it resets to zero but it does explain why we're seeing huge failed attempts counts and reports of confusing experiences from users.