Added username, which tried to log in to admin notification mail

It would be nice to see which username a potential hacker is using for trying to log in to the site.
So i added the username, which tried to log in, to the admin notification mail.

As a side effect i additionally changed the description of the @param tag for $user in the lockout function.