always finish the checker, not only on login!
fix userdb lookup - really

cf59bf0c1d80af4b1e3c77bd94ee80bad4436766 did not fully fix the
problem on a userlookup as we already fail on a locked account while
looking it up.