The login filter logs only failed login attempt for any user, but does not log any successful login.
In the audit logging it is useful to know not only the failed attempts, but also the successful logins, to see when a user (not anonymous) logged in. The problem is that now the audit logging has only the logouts, so you can see when the user get out but not when he logged in.
Simple patch is included.