auth events from user_events to auth_log transfer