Log failed auth attempts

[faush01]

Log failed auth attempts for local auth mode.
This should allow for better monitoring of brute force user/password attacks.

[nichwall]

Partially fixes #2579 based on follow up comments

Partially fixes #2533 (not sure if that request is for logging both local and OAuth attempts)

[advplyr]

This is better implemented in Auth than in the local auth lib. I added it here 1b914d5 along with logs for successful local auth logins.

[faush01]

Thanks, makes sense.
I was not sure how best to get the req into the call, I did see the option passReqToCallback but it was weird as sometimes a function was passed in to options. I am not really a fan of JS with its loose var types, and having logic use detected var types makes my head hurt.