security (cef) logging configuration and abstraction

remaining work is to hook up cef logging in the proper places in the application.  The only interesting event I can think of is "X failed auth attempts for said user" or poorly signed cookies, or incorrect CSRF tokens