User logins included in audit logs