Tweak logging for bad passwords

Log something that we can filter for in Papertrail and that gives us some more operational insight.

/cc @hampelm