MDL-40911 events: replaced add_to_log with events for login failed