Fix all detected problem.
There should be no¹ change in logic or behavior.
¹ Well one exception: If a suspicious login could not be persisted the code threw at some random place, so instead we handle this by notify the user and log that as critical severity.
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>