Banned user got banned until he logs in
Fragment of a discussion from Extension talk:ConfirmEdit
The problem of '$wgCaptchaTriggers['badlogin'] = false' not working should be fixed as of r107007. It wouldn't appear for new password failures, but as that user already had a "bad count", it was being shown anyway (which is now fixed).
Somehow the LoginForm::ABORTED status changed to WRONG_PASS, so it made debugging extremely difficult
This seems done in purpose, since the beggining (r27419): "Emulate a bad-password return to confuse the shit out of attackers"