FluentAuth Security Settings bug

You can set the number of login attempts and the time-out period, but if you then disable these settings, the system doesn't forget and still forbids login attempts that seem to be too many. And the duration setting doesn't matter. It will still forbid subsequent logins. It is most apparent when using magic login or when a user requests a new password and they've received the link via email.