Basic auth extension should have logging

The three classes for Connect's basic auth REST extension are pretty light on logging, which makes debugging issues and interplay between the REST extension and whatever JAAS login module the user may have configured difficult. We should add some more extensive logging to these classes, while taking care to prevent log spam in the case of repeated unauthenticated requests or leaking of sensitive information.