Moved getpass out to command-line, log auth failures.