[Bug 222668] login discloses non-existing usernames