remove outdated user existence check

doesn't work with htpasswd, and doesn't make sense with
future auth plugins

ref #115