add failed authentication to security log