fixed auth_event logging

logging_enabled was in auth.messages instead of auth.settings. logging logic had a typo