improve logging for login failures