login and logout event auditing