Date in login history is based on session _utime, not the very same time as the login triggering action
Affected version
All versions up to 2.18 and including current dev.
Summary
Success or Failure records for login history use _utime and not actual time of action.
This is enlighted when using 2FA. When tentatively implementing #3106 (closed) ordering of login failure of multiple successive 2FA failure couldn't be based on time since all entries had the very same one.
Possible fixes
Use current time within loging history.