This is not the only reason for failure at this point -- it might be that the email was incorrect.  I think it's still useful to log the difference between these cases (even if we return the same response).  So check if username == "" to distinguish.