better tracelogging on authentication