Even logging a username field is likely to catch a bunch of false positives of users entering their passwords in the username input.