Logging ntlm authentication