Add logging for authentication handlers

Add logging for authentication handlers to the PolicyBasedAuthenticationManager.

This would also close PR #617.
I like the additional logging here, just not sure about the level. In most cases this code path is executed when a back-end authentication system is unavailable, which is an error condition you would want to know about. In that view error level makes sense.