"authenticate" event failures now lead to a "LOGIN_BAD_AUTH" message being sent to client rather than "LOGIN_GEN_FAIL".

Re-prioritized some log errors and warnings to info.