Track invalid passwords for further attack analysis

Even If I'm not sure about this, EugenMayer has issued that it would be of help tracking also the invalid submitted password. This could easily be done in current tracking table with a field addition.

A more accurate description on what should be done is required, just keeping the passwords for nothing makes no sense, although they can be viewed using a regular database query.