Add email to cloud.gov logs for successful logins to aid troubleshooting

[neilmb]

Story

As a product team member
I want to be able to look at our logs to see what email addresses are logging in
so that I can assist users who are not able to see their domains

Acceptance Criteria

• Log messages for SUCCESSFUL logins include the email address that was used
• Saved Kibana log query and document a query string to filter out just the messages about logins
• Documentation about how to use the DomainInvitations table in tandem with the logs to be able to respond with clarity to a user who says "I am logging in, but I don't have access to any of my domains."
• Document decisions around Privacy/Record retention concerns, to ensure that we are operating securely.

Additional Context

One of the most common issues that users report is "I managed to log in to the new registrar but I don't have access to any of my domains." The likeliest reason is that they used a different email address with Login.gov than the address that was used on their DomainInvitations. Analysts should be able to easily say "Perhaps you are using a different email address. I see logins from (some email) and the invitations for your domain use (some other email)."

Issue Links

No response

[abroddrick]

@h-m-f-t do analysts have access to and use our kibana to actually see these logs? I'm wondering if this ticket really meets analyst needs

[h-m-f-t]

We haven't given them access, but maybe we could? Let's talk about it.

[vickyszuchin]

Accepted into the backlog. Not a priority.