add plugin: stop-user-enumeration