Even with all the recent logging improvements, it's unnecessarily complicated to easily grep what user logged in or logged out. We could just add two extra logs for these activities, as this is probably number one interesting event for auditors.