don't return setof users in totp_login_step2