Server now logs session metadata.

It logs what IP logged in, and as what user it authenticated or whether it failed to login due to bad password, bad username, or being blocked. The intention here is to log only what is minimally needed to detect a hacking attempt.