dont use plugins for this, use the Security Assist Show region behavior.
Add the login success message where you would like it to show, select the message text and go to then WebAssist -> Security Assist -> Show region. from the list of access rules select the "Logged into <Your user table>" rule (where <Your user table> is the name of your users table.
do the same for the failure message, using the Failed log in access rule.