Comment 2 for bug 1613276

To reset the attempts:

root.login_tries['user_login'] = 8

What it needs is to send an email at 6 out of 8 tries and to force a password reset after locking.

By the way, this does mean the user tried 8 times to login with a bad password.