Make current HTTP session available from SecurityAuthenticationSuccessfulEvent and SecurityPermissionCheckFailedEvent events

I would like to craete a CustomSecurityEventListener, because I should take some actions (like writing event log, updating last login time in the database, etc.) on a successful/unsuccesful login.
The actions are already defined in a http session listener class in our application.
So the idea is, to put a parameter into the HTTP session in the listener to use the existing code on the application side.
We are using form based login and smartcard login and we have to make event log entries in case of a succesful and unsuccesful login actions.

Based on the my log entries in case of a login, the SecurityAuthenticationSuccessfulEvent event should be catched for being sure, that the login was succesful.
On the other side, a SecurityPermissionCheckFailedEvent event shows, that the login was unsuccesful.