added logging on login failure