moved cui in post-auth section

moved cui in post-auth section (default and inner-tunnel) before logging.  This is to ensure that the cui value is generated before the logging occurs.