Firing separate events for password authentication vs. web login, as these are...

Firing separate events for password authentication vs. web login, as these are somewhat distinct internally.
Does not currently seem straightforward to determine when authentication (successful or not) is from REST vs. web UI;
could distinguish CLI mode if that is useful.