record password login failure even if password login is disabled (#2408)