log authentications

Put an audit trail in the logs, particularly for admin logins