improve logging a bit around authenticating users