What config settings should we use for the LoginNotify extension in production?
The [[ https://meta.wikimedia.org/wiki/2016_Community_Wishlist_Survey/Categories/Miscellaneous#CW2016-R007 | wishlist proposal ]] only mentions notifications for unsuccessful login attempts, but LoginNotify can also provide notifications for successful login attempts from unrecognized computers. Is this useful or likely to just confuse people?
Should any of the other default settings be changed:
```
"LoginNotifyAttemptsKnownIP": 10,
"LoginNotifyExpiryKnownIP": 604800,
"LoginNotifyAttemptsNewIP": 3,
"LoginNotifyExpiryNewIP": 1209600,
"LoginNotifyCheckKnownIPs": true,
"LoginNotifyEnableOnSuccess": true,
"@docLoginNotifyEnableForPriv": "Enable notification for users with certain rights. To disable set to false",
"LoginNotifyEnableForPriv": [ "editinterface", "userrights" ],
"@docLoginNotifySecretKey": "Override this to use a different secret than $wgSecretKey",
"LoginNotifySecretKey": null,
"@docLoginNotifyCookieExpire": "Expiry in seconds. Default is 180 days",
"LoginNotifyCookieExpire": 15552000,
"@docLoginNotifyCookieDomain": "Override to allow sharing login cookies between sites on different subdomains",
"LoginNotifyCookieDomain": null,
"LoginNotifyMaxCookieRecords": 6,
"@docLoginNotifyCacheLoginIPExpiry": "Set to false to disable caching IPs in memcache. Set to 0 to cache forever. Default 60 days.",
"LoginNotifyCacheLoginIPExpiry": 5184000
```
As part of this investigation, we also need to answer the following questions:
* Is the successful login notification affected by the LoginNotifyAttemptsNewIP and LoginNotifyExpiryNewIP config variables?
* What is LoginNotifyCheckKnownIPs for?
* What is LoginNotifyMaxCookieRecords for?
Please update the config documentation in the README.md once you have answered the questions above.