So it should be: if password == correct and first_success == true then { login failure; first_success = false }

Something like that.