Search more log fields, fix logging for session expiration