Log successful authentication at PLUGIN, not FATAL
    
    The server's mainline code doesn't appear to log successful
    authentication beyond what already shows up in the access log, so we
    should probably behave ourselves.