User enumeration #security

The "This USER does not exist" message can be used to check if a user exists in the database. This is called User enumeration. It's in the OWASP testing guide https://www.owasp.org/index.php/Testing_for_user_enumeration_%28OWASP-AT-002%29