(bug 38633) Don't block non-existent users via the API

Change-Id: I49232e177b23e11d04f64ac0d939073fa9418d64