shadow: Fix lastlog and faillog to find logs in /var/log. Closes #2575