I can't find a log of user login
There isn't a log for session/authentication information. Your best bet to find out who has a session to the workspace can be found in the database in the
The sessiondata field is stored in hex and then base64 encoded.
If you would like to see the user, you need to decode the field first.