Add logging for authentication handlers

Add logging for authentication handlers to the PolicyBasedAuthenticationManager.

This would also close PR #617.
I am good with this change. One small concern: Are we ALWAYS sure that `e.getCause().getMessage()` is a valid call? Could we bump into a NPE with the cause?