Merge pull request #9516 from alessandromarotta/isLockectOut-call-LoginAttempt-getByEmail

isLockedOut() in Member.php call LoginAttempt::getByEmail but it passes to it the unique_identifier_field instead $this->Email

src/Security/Member.php

@@ -382,8 +382,7 @@ class Member extends DataObject
             return false;
         }
 
-        $idField = static::config()->get('unique_identifier_field');
-        $attempts = LoginAttempt::getByEmail($this->{$idField})
+        $attempts = LoginAttempt::getByEmail($this->Email)
             ->sort('Created', 'DESC')
             ->limit($maxAttempts);