c2s: increase auth failure level to WARNING