We fixed a problem with the sessions service where occasionally a user would have multiple successive failed sign-in attempts.