First, store the credentials into the session info.
If the login succeeds, only the credentials from that login session will be sent.

Store all of the attempted credentials in aggregation buffer.

When the aggregation window expires and the event is flushed,
send the aggregated credentials to Warden.