Function record_failed_sign_in 

pub async fn record_failed_sign_in(
    pool: &PgPool,
    username: &str,
) -> AppResult<()>

Records a failed password sign-in (user.sign_in_failed). For an existing account the entry names it; for an unknown username it does not keep what was typed – that is often a password entered in the wrong field. The password itself is never recorded.