pam-base: use pam_lastlog(8) to maintain /var/log/lastlog.

... otherwise the file isn't created; we also start it just for the
session and in 'silent' mode because login(1) from util-linux already
prints the last logged time.