added login event to firewall listener