Really glad this ended well for the OP and not with a prosecution for violating the Computer Fraud & Abuse act (something I was deathly scared of last year when testing Virgin Mobile's ability to brute force logins).