When a user fails to login into the frontend, the login attempt is saved twice: once in the "users" table by the API, and the second time in the "profiles" table in the CWebUser::login() method. It must only be logged once, in the API.

We'll need to add patch to remove the values stored in the "profiles" table.