have you tried, this command,
aaa authentication attempts login number-of-attempts
By default, if user fails authentication (no authorization), then user is allowed 3 attempts. This can be changed using above command.
In above case I am talking about administrative authentication to the device.
Regards,
Prem