Log auth in syslog