collect loggable data before authentication. fixes #601