Added `auth.attempt` event and `attempting` method. Closes #1172.