Manual:Hooks/LoginAuthenticateAudit

Details
$user - The User object being authenticated against.

$password - The password being submitted and found wanting.

$retval - A LoginForm class constant with authenticateUserData return value (SUCCESS, WRONG_PASS, etc).