[QA] brute_force_protection does not log anything

[jnweiger]

Seen with brute_force_protection 1.2.0 (and also 1.1.0)

• enable app.
• try login a user 4 times with wrong password.
• the user gets blocked. OK
• inspect the owncloud log

  {"reqId":"ZBGoK7qJUG845N2jOmyzTAAAAAQ","level":2,"time":"2023-03-15T11:12:43+00:00","remoteAddr":"46.114.209.20","user":"--","app":"core","method":"POST","url":"\/login?user=dave","message":"Login failed: 'dave' (Remote IP: '46.114.209.20')"}
  {"reqId":"ZBGoPh1eqxX9TLjz1oNVMwAAAAA","level":2,"time":"2023-03-15T11:13:02+00:00","remoteAddr":"46.114.209.20","user":"--","app":"core","method":"POST","url":"\/login?user=dave","message":"Login failed: 'dave' (Remote IP: '46.114.209.20')"}
  {"reqId":"ZBGoQrCK0@iLOse6z7CnUwAAAAg","level":2,"time":"2023-03-15T11:13:07+00:00","remoteAddr":"46.114.209.20","user":"--","app":"core","method":"POST","url":"\/login?user=dave","message":"Login failed: 'dave' (Remote IP: '46.114.209.20')"}
  {"reqId":"ZBGoph1eqxX9TLjz1oNVNwAAAAA","level":2,"time":"2023-03-15T11:14:46+00:00","remoteAddr":"46.114.209.20","user":"--","app":"core","method":"POST","url":"\/login?user=dave","message":"Login failed: 'dave' (Remote IP: '46.114.209.20')"}
  {"reqId":"hEmaOfdKA1K3p60DlpQO","level":1,"time":"2023-03-15T11:15:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"--","url":"--","message":"Invalidating tokens older than 2023-03-15T10:55:02+00:00"}

• nothing in the log indicates that the user was blocked. BAD

Expected behaviour:

• whenever the user sees 'To many failed attempts. Try again in 5 Minutes' this should also appear in the owncloud log.