Should not authenticate user with empty login
User repository with findbyhash and login