Hi. look for log_logins in your config file, this option was added before the 0.2a release. Loging changes to passwords would have to be done as part of your change password patch but it should be easy to add. Something like this should do it:
write_log('password', $_SESSION['username'].' PW SUCCESSFUL');