Audit login, logout, and source IP addresses

[grantfitzsimmons]

Related to #3608

Are audit logs available that include AT LEAST all of the following: login, logout, actions performed, and source IP address?*

From the HECVAT

Actions performed in the system are audited using the "Audit Log" within the Specify 7 application. This does not currently include login, logout, or source IP addresses, but this is something we would like to explore in the future.

[grantfitzsimmons]

Challenges: We do not track IP address activity within the Specify 7 app, only via the web server (Nginx). API requests are sent to the web server logs rapidly and can be stored for the long-term and searched, but needs to be more intuitive for users.