Add logging for authentication handlers

Add logging for authentication handlers to the PolicyBasedAuthenticationManager.

This would also close PR #617.
Maybe we should add a `NotNull` to the parameter?