Add unit tests for auth

**Feature request**
It would be great to have logging for types.

**Use case**
Many users need this functionality for production deployments.

**Implementation idea**
Add a new config option `enable_logging` with default `false`.

No files or test entry points are identified. Start by locating the authentication and configuration code, then trace how production logging is configured; done means the requested logging option has a false default and the relevant authentication behavior is covered by unit tests.

Written by the indexing model from the issue text.