title: Laravel 5.6 Changing e-mail address resets login throttle
body: <p>There's a weird issue with laravel's login throttling. I set the variables:</p>
  
  <pre><code> public $maxAttempts = 5;
   public $decayMinutes = 3;
  </code></pre>
  
  <p>in the Auth/LoginController.php, and override the <code>sendLockoutResponse</code> function like this:</p>
  
  <pre><code>protected function sendLockoutResponse(Request $request) {
    $seconds = $this-&gt;limiter()-&gt;availableIn(
        $this-&gt;throttleKey($request)
    );
  
    $minutes = floor($seconds / 60);
    $seconds = $seconds % 60;
  
    return back()-&gt;with('authError', 'Wait ' . $minutes . ' minutes and ' . $seconds . ' seconds.');
  }
  </code></pre>
  
  <p>When I try 5 failed login attempts using wrong credentials I can see the <code>AuthError</code> message on the page. And if I go on with the same e-mail address I continue to see seconds and minutes decrease. But if I change the e-mail the whole throttle gets reset. I still have 5 failed attempts to go.</p>
  
  <p>My question is: if laravel determines a user's login attempts by IP address and uses cache to poll them, why changing the e-mail resets the login throttle?</p>
  
  <p>PS my .env values are:</p>
  
  <pre><code>BROADCAST_DRIVER=log
  CACHE_DRIVER=file
  SESSION_DRIVER=file
  SESSION_LIFETIME=120
  SESSION_SECURE_COOKIE=false
  QUEUE_DRIVER=database
  </code></pre>